Commit Graph
1236 Commits
Author SHA1 Message Date
dholbach 941304cf40 Merge pull request #1061 from kubereboot/dependabot/github_actions/step-security/harden-runner-2.10.4
build(deps): bump step-security/harden-runner from 2.10.3 to 2.10.4
2025-01-20 21:12:24 +01:00
dependabot[bot] 95990fbfd8 build(deps): bump step-security/harden-runner from 2.10.3 to 2.10.4
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.10.3 to 2.10.4.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](https://github.com/step-security/harden-runner/compare/c95a14d0e5bab51a9f56296a4eb0e416910cd350...cb605e52c26070c328afc4562f0b4ada7618a84e)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-20 17:56:11 +00:00
dholbach b72417259a Merge pull request #1060 from kubereboot/dependabot/go_modules/github.com/prometheus/common-0.62.0
build(deps): bump github.com/prometheus/common from 0.61.0 to 0.62.0
2025-01-17 23:04:37 +01:00
dependabot[bot] 4ff41fa4fc build(deps): bump github.com/prometheus/common from 0.61.0 to 0.62.0
Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.61.0 to 0.62.0.
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/RELEASE.md)
- [Commits](https://github.com/prometheus/common/compare/v0.61.0...v0.62.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/common
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-17 17:44:46 +00:00
Jean-Philippe Evrard 0b02795d70 Merge pull request #1059 from kubereboot/dependabot/github_actions/docker/build-push-action-6.12.0
build(deps): bump docker/build-push-action from 6.11.0 to 6.12.0
1.17.0
2025-01-15 20:02:27 +01:00
Jean-Philippe Evrard 50189ebeab Merge pull request #1058 from dholbach/prep-1.17.0
prepare 1.17.0 release
2025-01-15 20:01:06 +01:00
dependabot[bot] 2bd8d484c7 build(deps): bump docker/build-push-action from 6.11.0 to 6.12.0
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.11.0 to 6.12.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/b32b51a8eda65d6793cd0494a773d4f6bcef32dc...67a2d409c0a876cbe6b11854e3e25193efe4e62d)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-15 17:45:24 +00:00
Daniel Holbach e191397fa4 update all k8s deps
Signed-off-by: Daniel Holbach <daniel.holbach@gmail.com>
2025-01-15 11:08:17 +01:00
Daniel Holbach 8c2292ae4c prepare 1.17.0 release
Signed-off-by: Daniel Holbach <daniel.holbach@gmail.com>
2025-01-15 11:05:26 +01:00
dholbach aa918fba5f Merge pull request #1056 from kubereboot/dependabot/github_actions/github/codeql-action-3.28.1
build(deps): bump github/codeql-action from 3.28.0 to 3.28.1
2025-01-13 20:02:49 +01:00
dependabot[bot] 72e13cc0de build(deps): bump github/codeql-action from 3.28.0 to 3.28.1
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.0 to 3.28.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/48ab28a6f5dbc2a99bf1e0131198dd8f1df78169...b6a472f63d85b9c78a3ac5e89422239fc15e9b3c)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-13 17:51:03 +00:00
dholbach e60c8b730b Merge pull request #1054 from kubereboot/dependabot/github_actions/docker/setup-qemu-action-3.3.0
build(deps): bump docker/setup-qemu-action from 3.2.0 to 3.3.0
2025-01-10 19:47:50 +01:00
dholbach 55357c9c65 Merge pull request #1053 from kubereboot/dependabot/github_actions/step-security/harden-runner-2.10.3
build(deps): bump step-security/harden-runner from 2.10.2 to 2.10.3
2025-01-10 19:47:20 +01:00
dholbach 3e082ef0f1 Merge pull request #1052 from kubereboot/dependabot/github_actions/lycheeverse/lychee-action-2.2.0
build(deps): bump lycheeverse/lychee-action from 2.1.0 to 2.2.0
2025-01-10 19:46:50 +01:00
dholbach f1d5ddc3e2 Merge pull request #1055 from kubereboot/dependabot/github_actions/docker/build-push-action-6.11.0
build(deps): bump docker/build-push-action from 6.10.0 to 6.11.0
2025-01-10 19:46:27 +01:00
dependabot[bot] b6af0a1d5f build(deps): bump docker/build-push-action from 6.10.0 to 6.11.0
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.10.0 to 6.11.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/48aba3b46d1b1fec4febb7c5d0c644b249a11355...b32b51a8eda65d6793cd0494a773d4f6bcef32dc)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-10 17:48:19 +00:00
dependabot[bot] 9206ff0d91 build(deps): bump docker/setup-qemu-action from 3.2.0 to 3.3.0
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 3.2.0 to 3.3.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](https://github.com/docker/setup-qemu-action/compare/49b3bc8e6bdd4a60e6116a5414239cba5943d3cf...53851d14592bedcffcf25ea515637cff71ef929a)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-10 17:48:16 +00:00
dependabot[bot] b2ee3e3cdd build(deps): bump step-security/harden-runner from 2.10.2 to 2.10.3
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.10.2 to 2.10.3.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](https://github.com/step-security/harden-runner/compare/0080882f6c36860b6ba35c610c98ce87d4e2f26f...c95a14d0e5bab51a9f56296a4eb0e416910cd350)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-10 17:48:13 +00:00
dependabot[bot] 2a8dcac3d3 build(deps): bump lycheeverse/lychee-action from 2.1.0 to 2.2.0
Bumps [lycheeverse/lychee-action](https://github.com/lycheeverse/lychee-action) from 2.1.0 to 2.2.0.
- [Release notes](https://github.com/lycheeverse/lychee-action/releases)
- [Commits](https://github.com/lycheeverse/lychee-action/compare/f81112d0d2814ded911bd23e3beaa9dda9093915...f796c8b7d468feb9b8c0a46da3fac0af6874d374)

---
updated-dependencies:
- dependency-name: lycheeverse/lychee-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-10 17:48:07 +00:00
Jean-Philippe Evrard 455b3df0dc improve tests (#1021)
* Add e2e test concurrency w/ signal

This will help make sure the big refactoring does not break
the main features.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>

* Add podblocker test

Extends test coverage to ensure nothing breaks

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>

* Rename "version" with "variant" in tests

For tests not running in different kubernetes versions,
but have different tests subcases/variants, rephrase the wording
"versions" as it is confusing.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>

* Fix Staticcheck's SA1024 (subset with dupe chars)

This will replace trim, taking a cutset, with Replace.

This clarifies the intent to remove a substring.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>

* Fix Staticcheck's ST1005

According to staticcheck, Error strings should not be capitalized (ST1005).

This changes the cases for our errors.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>

* Fix incorrect string prints

A few strings have evolved to eventually remove all the templating
part of their strings, yet kept the formatting features.

This is incorrect, and will not pass staticcheck SA1006 and S1039.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>

* Add staticcheck in make tests

Without this, people like myself will forget to run staticcheck.

This fixes it by making it part of make tests, which will run
with all the fast tests in CI.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>

---------

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
2025-01-09 14:42:28 -08:00
Jean-Philippe Evrard 856c1b6950 Merge pull request #1051 from kubereboot/dependabot/docker/alpine-3.21.2
build(deps): bump alpine from 3.20.3 to 3.21.2
2025-01-09 23:23:24 +01:00
Jean-Philippe Evrard 565fea9d62 Merge pull request #1050 from kubereboot/dependabot/github_actions/actions/upload-artifact-4.6.0
build(deps): bump actions/upload-artifact from 4.4.3 to 4.6.0
2025-01-09 23:22:35 +01:00
Jean-Philippe Evrard 5397501441 Merge pull request #1047 from kubereboot/dependabot/github_actions/helm/kind-action-1.12.0
build(deps): bump helm/kind-action from 1.10.0 to 1.12.0
2025-01-09 23:21:03 +01:00
Jean-Philippe Evrard 5d5310b509 Merge pull request #1046 from kubereboot/dependabot/github_actions/github/codeql-action-3.28.0
build(deps): bump github/codeql-action from 3.27.6 to 3.28.0
2025-01-09 23:20:17 +01:00
Jean-Philippe Evrard 2415937578 Merge pull request #1042 from kubereboot/dependabot/github_actions/docker/setup-buildx-action-3.8.0
build(deps): bump docker/setup-buildx-action from 3.7.1 to 3.8.0
2025-01-09 23:19:36 +01:00
Jean-Philippe Evrard 6dce6d44e0 Merge pull request #1040 from kubereboot/dependabot/github_actions/actions/setup-go-5.2.0
build(deps): bump actions/setup-go from 5.1.0 to 5.2.0
2025-01-09 23:18:47 +01:00
Jean-Philippe Evrard d0f9fa4647 Merge pull request #1037 from kubereboot/dependabot/go_modules/github.com/prometheus/common-0.61.0
build(deps): bump github.com/prometheus/common from 0.60.1 to 0.61.0
2025-01-09 23:17:59 +01:00
dependabot[bot] 6527ca3b6e build(deps): bump helm/kind-action from 1.10.0 to 1.12.0
Bumps [helm/kind-action](https://github.com/helm/kind-action) from 1.10.0 to 1.12.0.
- [Release notes](https://github.com/helm/kind-action/releases)
- [Commits](https://github.com/helm/kind-action/compare/0025e74a8c7512023d06dc019c617aa3cf561fde...a1b0e391336a6ee6713a0583f8c6240d70863de3)

---
updated-dependencies:
- dependency-name: helm/kind-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-09 22:11:29 +00:00
dependabot[bot] b2933fab75 build(deps): bump github/codeql-action from 3.27.6 to 3.28.0
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.27.6 to 3.28.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/aa578102511db1f4524ed59b8cc2bae4f6e88195...48ab28a6f5dbc2a99bf1e0131198dd8f1df78169)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-09 22:11:09 +00:00
dependabot[bot] 248242da5b build(deps): bump docker/setup-buildx-action from 3.7.1 to 3.8.0
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.7.1 to 3.8.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/c47758b77c9736f4b2ef4073d4d51994fabfe349...6524bf65af31da8d45b59e8c27de4bd072b392f5)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-09 22:10:16 +00:00
dependabot[bot] d94087afad build(deps): bump actions/upload-artifact from 4.4.3 to 4.6.0
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.4.3 to 4.6.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882...65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-09 22:09:58 +00:00
dependabot[bot] 465a6cceab build(deps): bump alpine from 3.20.3 to 3.21.2
Bumps alpine from 3.20.3 to 3.21.2.

---
updated-dependencies:
- dependency-name: alpine
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-09 22:09:37 +00:00
dependabot[bot] 51dc738292 build(deps): bump actions/setup-go from 5.1.0 to 5.2.0
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5.1.0 to 5.2.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed...3041bf56c941b39c61721a86cd11f3bb1338122a)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-09 22:09:30 +00:00
dependabot[bot] 36f38825b9 build(deps): bump github.com/prometheus/common from 0.60.1 to 0.61.0
Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.60.1 to 0.61.0.
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/RELEASE.md)
- [Commits](https://github.com/prometheus/common/compare/v0.60.1...v0.61.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/common
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-09 22:09:19 +00:00
Jean-Philippe Evrard de77a0f44c Merge pull request #1045 from dholbach/update
Update k8s and x/net dependencies
2025-01-09 23:08:01 +01:00
Jean-Philippe Evrard 628a8ae590 Fix CVE-2024-45338 and bump k8s.
Without this, we'll stay in k8s 0.29, and a vulnerable golang/net.
This contains other bumps, like bumps to golang.org/x/text, which is
flagged by FOSSA as CC licensed.

As these CC-licensed code snippets are used in other CNCF projects
(like kubernetes), this is fine to bump and will be excluded
in our license scans in the future.

Closes: #1049
Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
2025-01-09 22:53:16 +01:00
Daniel Holbach dd5a303113 update test infra as well
Signed-off-by: Daniel Holbach <daniel.holbach@gmail.com>
2025-01-09 22:20:18 +01:00
dholbach 72e39575c2 Merge pull request #1036 from kubereboot/dependabot/github_actions/github/codeql-action-3.27.6
build(deps): bump github/codeql-action from 3.27.5 to 3.27.6
2024-12-03 19:50:35 +01:00
dependabot[bot] ab1673a72a build(deps): bump github/codeql-action from 3.27.5 to 3.27.6
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.27.5 to 3.27.6.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/f09c1c0a94de965c15400f5634aa42fac8fb8f88...aa578102511db1f4524ed59b8cc2bae4f6e88195)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-12-03 17:33:54 +00:00
dholbach c2fbb8f849 Merge pull request #1034 from kubereboot/dependabot/go_modules/github.com/stretchr/testify-1.10.0
build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0
2024-11-27 10:23:18 +01:00
dholbach 473beb873c Merge pull request #1035 from kubereboot/dependabot/github_actions/docker/build-push-action-6.10.0
build(deps): bump docker/build-push-action from 6.9.0 to 6.10.0
2024-11-27 10:23:00 +01:00
dependabot[bot] b8bdb5e00a build(deps): bump docker/build-push-action from 6.9.0 to 6.10.0
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.9.0 to 6.10.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/4f58ea79222b3b9dc2c8bbdd6debcef730109a75...48aba3b46d1b1fec4febb7c5d0c644b249a11355)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-26 17:19:33 +00:00
dependabot[bot] a9676db6c3 build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.9.0 to 1.10.0.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.9.0...v1.10.0)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-25 17:17:31 +00:00
Jean-Philippe Evrard 9848deb283 Merge pull request #1029 from kubereboot/dependabot/github_actions/docker/metadata-action-5.6.1
build(deps): bump docker/metadata-action from 5.5.1 to 5.6.1
2024-11-22 12:00:26 +01:00
Jean-Philippe Evrard 15b451ee04 Merge pull request #1030 from kubereboot/dependabot/github_actions/step-security/harden-runner-2.10.2
build(deps): bump step-security/harden-runner from 2.10.1 to 2.10.2
2024-11-22 11:59:53 +01:00
Jean-Philippe Evrard 8b14073176 Merge pull request #1033 from kubereboot/dependabot/github_actions/actions/dependency-review-action-4.5.0
build(deps): bump actions/dependency-review-action from 4.4.0 to 4.5.0
2024-11-22 11:59:20 +01:00
dependabot[bot] 1b5d01ee8c build(deps): bump actions/dependency-review-action from 4.4.0 to 4.5.0
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4.4.0 to 4.5.0.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](https://github.com/actions/dependency-review-action/compare/4081bf99e2866ebe428fc0477b69eb4fcda7220a...3b139cfc5fae8b618d3eae3675e383bb1769c019)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-21 17:53:46 +00:00
Jean-Philippe Evrard b37bf39a74 Merge pull request #1031 from kubereboot/dependabot/github_actions/aquasecurity/trivy-action-0.29.0
build(deps): bump aquasecurity/trivy-action from 0.28.0 to 0.29.0
2024-11-21 14:08:52 +01:00
Jean-Philippe Evrard c768c7c8d5 Merge pull request #1032 from kubereboot/dependabot/github_actions/github/codeql-action-3.27.5
build(deps): bump github/codeql-action from 3.27.4 to 3.27.5
2024-11-21 14:08:09 +01:00
dependabot[bot] 5530ab0db1 build(deps): bump github/codeql-action from 3.27.4 to 3.27.5
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.27.4 to 3.27.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/ea9e4e37992a54ee68a9622e985e60c8e8f12d9f...f09c1c0a94de965c15400f5634aa42fac8fb8f88)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-20 17:56:27 +00:00